Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa
File: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (raw, json)
Hash identifier: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=
Subject key identifier: A3:35:CA:A0:A7:57:54:D6:01:CF:0A:34:33:3D:0C:20:B3:63:74:28
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019426D894CFED3B4FBCF7D89160A57AFB5F
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa
Signing time: Thu 02 Jan 2025 11:48:35 +0000
ROA not before: Thu 02 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 80.249.208.0/21 maxlen: 21
2001:7f8:86::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:94:cf:ed:3b:4f:bc:f7:d8:91:60:a5:7a:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jan 2 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a335caa0a75754d601cf0a34333d0c20b3637428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:82:49:d4:5b:25:9d:70:6e:fe:8d:b0:4b:
f1:0c:bb:24:cd:15:4a:5f:61:c1:f4:d6:07:98:11:
47:d0:a9:35:f7:60:9c:70:35:2b:85:fe:7c:fe:87:
be:35:18:0b:d0:d0:98:70:c8:a6:b7:1d:2f:f9:17:
57:3f:3c:0f:37:14:ae:c5:d0:11:da:cd:d9:0d:60:
c6:8b:cd:7f:35:e8:c5:96:cf:9d:b3:7c:71:58:4c:
a3:e1:ae:b4:b2:5d:8f:4e:16:5f:be:37:d7:05:ff:
65:fb:a2:3b:9b:d0:70:2e:01:3e:5c:36:1e:d6:30:
44:62:e3:7b:6c:23:9f:0b:31:2e:28:b3:63:af:10:
4c:eb:fa:72:90:3c:0d:ba:86:db:e3:f5:d4:07:43:
dc:85:d8:54:ea:de:2d:b2:f8:c4:c2:88:35:f4:e7:
dd:97:64:84:a2:6e:8c:2d:96:58:a0:2d:bc:c1:53:
f8:ee:82:31:f3:81:21:3c:7f:d6:5e:c6:64:96:a7:
bb:f6:26:ed:c2:f6:8e:17:c3:1f:f8:ae:f0:91:a7:
58:24:fe:7e:3f:c1:0d:a4:dc:99:34:cc:2d:25:bc:
31:5b:9b:23:22:ff:04:d1:bb:3d:f1:13:7d:5b:9b:
4f:aa:80:db:d7:4d:6b:cb:c8:69:4d:31:a7:f7:11:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:CA:A0:A7:57:54:D6:01:CF:0A:34:33:3D:0C:20:B3:63:74:28
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.208.0/21
IPv6:
2001:7f8:86::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1e:3e:5a:e5:03:35:69:68:f9:32:71:c5:1c:17:ae:e9:d4:
a1:98:6c:dd:f1:8b:dc:6b:b1:c0:22:4e:74:ac:87:bb:82:85:
52:e0:0b:7f:5e:48:65:c2:05:40:3d:90:d2:be:65:3f:3c:4c:
00:7d:7d:6b:e7:6d:2e:cc:10:2e:51:bf:b9:c0:08:c4:02:4d:
40:1b:fb:c2:b6:6c:f4:90:0e:e3:41:9a:9d:51:8e:79:a6:de:
77:4b:74:71:68:c9:0c:4d:3c:2b:9c:f4:b0:ed:ad:f0:9d:d5:
ae:f7:b0:ba:07:99:13:1e:73:13:bf:b8:a8:d6:1e:e4:fd:1d:
32:83:0d:d9:39:5b:f0:d2:d4:be:9a:61:c3:66:2d:d7:80:7e:
5c:ce:2b:1a:02:01:41:74:3a:f6:f4:06:31:81:7c:20:a7:7a:
63:25:d9:6b:72:28:1e:71:38:3e:6e:83:46:5f:54:86:6f:2d:
73:b0:bd:8e:c7:3b:d8:9c:d5:d2:9e:6b:cd:4b:17:7d:ce:d8:
99:5d:45:f3:a9:32:f6:12:a0:85:6a:ea:a2:f0:a2:f8:ce:01:
67:36:ec:35:12:d3:61:89:62:0d:9b:b2:95:83:2d:a3:1c:fd:
93:1b:fe:bc:f3:ae:71:7f:0d:a0:92:c2:d8:d5:25:dc:a1:b2:
af:ba:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:11 2025 by rpki-client